Hmm... that's not how I see it. `getWorkPath` right now returns a path to an exclusively-owned work directory. The behavior of locking the resource when it is generated, and before it is tampered with, is encapsulated in a function (which is what I meant by "close together").

I don't feel strongly about the issue, though, so I'll change it.